Skip to main content

BackChannelAuthenticationValidator Class

Abblix.Oidc.Server

Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation

BackChannelAuthenticationValidator Class

Validates CIBA-related metadata (OpenID Connect Client-Initiated Backchannel Authentication 1.0 §4): the consistency between backchannel_token_delivery_mode and backchannel_client_notification_endpoint, and that backchannel_authentication_request_signing_alg is on the server's supported list.

public class BackChannelAuthenticationValidator : Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.IClientRegistrationContextValidator

Inheritance System.Object → BackChannelAuthenticationValidator

Implements IClientRegistrationContextValidator

Constructors

BackChannelAuthenticationValidator(IJsonWebTokenValidator) Constructor

Validates CIBA-related metadata (OpenID Connect Client-Initiated Backchannel Authentication 1.0 §4): the consistency between backchannel_token_delivery_mode and backchannel_client_notification_endpoint, and that backchannel_authentication_request_signing_alg is on the server's supported list.

public BackChannelAuthenticationValidator(Abblix.Jwt.IJsonWebTokenValidator jwtValidator);

Parameters

jwtValidator IJsonWebTokenValidator

Source of supported JWT signing algorithms.

Methods

BackChannelAuthenticationValidator.ValidateAsync(ClientRegistrationValidationContext) Method

Validates the slice of registration metadata this implementation owns. May mutate ClientRegistrationValidationContext with derived values (for example the resolved sector identifier).

public System.Threading.Tasks.Task<Abblix.Oidc.Server.Common.OidcError?> ValidateAsync(Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.ClientRegistrationValidationContext context);

Parameters

context ClientRegistrationValidationContext

The shared validation context for the current request.

Implements ValidateAsync(ClientRegistrationValidationContext)

Returns

System.Threading.Tasks.Task<OidcError>
An OidcError describing the rejection, or null when valid.